NVD

Id
36173  
Name
CVE-2014-9475  
Description
Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.19.23, 1.2x before 1.22.15, 1.23.x before 1.23.8, and 1.24.x before 1.24.1 allows remote authenticated users to inject arbitrary web script or HTML via a wikitext message.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-01-16  
Modified Date
2015-09-17  
Seq
2014-9475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184851 36173 CVE-2014-9475 DSA-3110  View
184852 36173 CVE-2014-9475 MDVSA-2015:006  View
184853 36173 CVE-2014-9475 [oss-security] 20141221 CVE Request: Mediawiki security releases 1.24.1, 1.23.8, 1.22.15 and 1.19.23  View
184854 36173 CVE-2014-9475 [oss-security] 20150103 Re: CVE Request: Mediawiki security releases 1.24.1, 1.23.8, 1.22.15 and 1.19.23  View
184855 36173 CVE-2014-9475 [MediaWiki-announce] 20141217 MediaWiki Security and Maintenance Releases: 1.24.1, 1.23.8, 1.22.15 and 1.19.23  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18827 JVNDB-2014-007702 MediaWiki の thumb.php におけるクロスサイトスクリプティングの脆弱性 MediaWiki の thumb.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-9475 76768 CVE-2014-9475 36173 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007702.html 2014-12-17 2015-01-20 View